Real time monitoring of a server via GUI during OS inplace upgrade

[Sourav97]

Hello,

I have an upcoming OS inplace upgrade for a Windows virtual machine in GCP and this is the first time we will be performing this in Google Cloud.

I was looking for some tools native to GCP which would allow me to have a real-time monitoring of the process to ensure that I am aware of each and every process taking place at any instant of time. GCP do provide Serial port connection to connect to the server but that is in CLI mode  . Also there is a ' Screenshot' option available to do so, but it does give the real-time feel. Something like VNC kindof.

So can anyone suggest any tool which would allow me to have a VNC type feel ?

[FrancoGP]

Hi @Sourav97 ,

Welcome to Google Cloud Community!

So for an upgrade I wouldn't know any feasible solution, external VNC agent would require to have the OS running and the GCP native solution is not an exception to it.

I know that you want a more streamline viewing, but the instance screenshot seems like the most safe bet (I use it myself) for this requirement, in theory the api allows 25 calls per second, but you have to wait 'till the screenshot is done to retrieve another one. Not exactly what you wanted, but useful regardless

Good Luck!

[Sourav97]

Hi @FrancoGP ,

Agree with you. The screenshot feature does allow to have a view of what's happening during the OS upgrade, but the way a VNC provides the real-time view is what is  missing here.

Hope GCP team might want to implement this feature . 🙂

[reinc]

Hi @Sourav97, 

Welcome to Google Cloud Community! 

Here's an option, focusing on tools that provide VNC-like functionality and address your need for real-time monitoring during an in-place OS upgrade in GCP:

Using Google Cloud's IAP Desktop
This is a free, open-source RDP client that integrates with Google Cloud Identity-Aware Proxy (IAP). While it's primarily an RDP client, it's a more secure and manageable alternative to exposing RDP directly to the internet. You can use it in combination with a remote desktop solution, but it also allows connection via Google Cloud shell.

• Pros -Enhanced security (IAP authentication), easier management than direct RDP, integrates well with GCP, relatively simple setup if you're already using IAP.
• Cons -Requires IAP to be enabled for your project, relies on RDP functionality, which may not be ideal if RDP is problematic after an OS upgrade, may not work with local user accounts.

STEPS

1. Enable IAP - Enable IAP for the Compute Engine API in your GCP project.
2. Configure IAP for the VM - Add the service account associated with your VM instance as a member of the IAP-secured resource (ex: the Compute Engine API). Give the service account the "IAP-secured Tunnel User" role.
3. Install and Configure IAP Desktop - Download and install IAP Desktop on your local machine. Configure it to connect to your GCP project.
4. Connect - Use IAP Desktop to connect to the Windows VM. It will handle the IAP authentication and then establish an RDP connection.For your reference, see the documentation: Using IAP for TCP forwarding and Github IAP Desktop Resources
5. Set up a VPN - Establish a secure VPN connection between your local machine and your GCP network.
6. Firewall Rule - Configure the GCP firewall to allow RDP traffic (TCP port 3389) only from the VPN's internal IP address range. Do not allow RDP traffic from the internet.

Additionally, to understand about IAP Desktop and IAP TCP forwarding you may check this blog. 

If you have any questions or need further assistance, please reach out to our Google Cloud Support team.

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.

[Sourav97]

Hi @reinc ,

Thanks for the suggesstion. Surely I would love to check this solution by trying to implement the same on my GCP sandbox.